![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/0xyRLQcbkADlUgiGuwWr0YmnAc8.roa
File: 0xyRLQcbkADlUgiGuwWr0YmnAc8.roa (raw, json)
Hash identifier: EzjTj+NZKHGj8NpuUrqMEiHVEt9h6ME92L3jW12MrNM=
Subject key identifier: D3:1C:91:2D:07:1B:90:00:E5:52:08:86:BB:05:AB:D1:89:A7:01:CF
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 02E8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0xyRLQcbkADlUgiGuwWr0YmnAc8.roa
Signing time: Sun 31 Mar 2024 01:35:47 +0000
ROA not before: Sun 31 Mar 2024 01:35:47 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2516
IP address blocks: 106.183.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 01:35:47 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=D31C912D071B9000E5520886BB05ABD189A701CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:23:9c:b1:4c:d9:f7:d2:73:53:23:2f:5c:
74:f4:51:ab:51:ce:18:32:e2:88:a7:b1:e8:55:75:
3e:f5:1c:48:9a:45:af:50:11:b3:c4:8c:51:ed:08:
72:e2:36:96:ec:7b:b8:1f:bc:d8:79:76:8a:7f:ee:
78:47:a5:4e:73:aa:1b:83:20:2b:c0:a9:17:83:c6:
d0:53:e2:ad:a6:cc:f9:bb:d0:fe:ac:d5:a8:da:1a:
2d:47:ef:ba:d5:d7:af:4d:3b:3b:c0:f7:57:b5:ae:
91:50:65:11:cd:11:c8:73:bf:1c:f2:e0:11:58:68:
77:34:58:5a:d6:23:70:8d:95:b4:55:81:a8:0e:11:
29:78:23:65:4d:3c:d5:a6:75:82:12:db:67:01:52:
17:af:40:4f:e9:47:0b:02:73:55:60:ef:fd:7f:29:
39:7b:88:f2:99:4f:ab:89:5c:1a:83:c4:e1:f4:8d:
f7:0a:47:82:9d:e5:a1:5d:7e:e2:ca:db:15:da:ad:
82:48:80:17:18:4b:01:d7:30:d9:e1:e4:9d:67:ab:
06:14:cd:38:9f:54:c4:82:b2:64:d8:63:6b:78:a5:
04:e7:0d:2b:ab:ca:97:a0:7b:ba:c3:f7:99:5e:ee:
2b:ca:bb:81:b4:25:0c:92:a5:55:f2:b5:64:c4:9a:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1C:91:2D:07:1B:90:00:E5:52:08:86:BB:05:AB:D1:89:A7:01:CF
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0xyRLQcbkADlUgiGuwWr0YmnAc8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
106.183.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:93:d1:e3:80:39:87:e9:76:c6:cc:41:c5:2b:9d:25:99:12:
23:1f:c5:2b:3f:6d:49:e1:70:16:c2:d6:99:b0:7f:83:36:f4:
a6:80:f0:5e:b7:03:4f:14:e0:11:aa:40:54:45:db:da:e1:45:
cd:43:38:6f:44:3c:46:3a:03:ec:77:a7:0e:30:e3:2c:0f:2d:
f8:35:7f:4a:eb:6c:1c:63:b4:82:a7:24:d5:8f:b2:f8:ba:7a:
09:f0:ea:66:eb:78:1c:b4:6b:76:67:35:f1:95:e2:56:59:69:
f3:53:74:7f:19:9e:aa:e4:f8:dc:9d:d1:11:65:f4:d1:65:a3:
69:a8:dc:04:32:25:1d:90:38:d2:c8:7b:66:88:d2:20:db:57:
a6:ee:76:01:26:4d:4c:be:bb:40:98:3c:27:d1:a5:12:23:08:
5d:64:47:80:cb:d3:8b:4e:33:b8:78:ac:9b:43:81:bb:e1:f6:
fb:26:0f:e0:73:89:32:f3:fe:f1:47:e2:f9:cf:8a:4b:7e:b8:
1a:8e:b5:9e:c7:ac:c1:26:02:49:72:0a:20:a7:dc:33:ee:35:
93:3c:e2:6e:da:61:2c:24:ed:bb:2f:58:d0:d5:0c:4d:0c:47:
d0:40:2c:b3:c8:57:a5:58:c2:79:2c:1c:66:1a:81:96:60:52:
17:ad:50:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:23 2025 by rpki-client